Organizer
Partner Company
How Did Printers Become Nightmares?
Yunhai Zhang
NSFOCUS
Abstract
PrinterNightmare is one of the most popular topics on security this summer. You may wonder why it came again and again. This is because it is not just one vulnerability, but a series of interesting logical vulnerabilities in printer spooler services.
This presentation will review these printer spooler vulnerabilities and their predecessors to explain how they are found, and then analyze the patches for each of them to figure out why they fail to solve the problem and how to fix properly. Finally, some improvement proposal will be given to make printer spooler services more secure.
Speaker Info
Yunhai Zhang is Director of NSFOCUS TIANJI LAB. He has worked on information security for more than a decade. He has spoken at many security conferences in the past, such as Blackhat, Bluehat, DEFCON, POC, TSec, XCon, etc. He has won the Microsoft Mitigation Bypass Bounty 5 years in a row since 2014. He was nominated for Pwnie Award in 2021.